0x0d / 0x0eWill my encryption survive a quantum computer?

Post-Quantum Cryptography

ML-KEM, ML-DSA, SLH-DSA, FN-DSA and HQC, hybrid migration, and what "harvest now, decrypt later" means for anything you encrypt today.

Start here

FIPS 203: ML-KEM — Module-Lattice-Based Key-Encapsulation Mechanism (formerly CRYSTALS-Kyber)
FIPS 204: ML-DSA — Module-Lattice-Based Digital Signature Algorithm (formerly CRYSTALS-Dilithium)
FIPS 205: SLH-DSA — Stateless Hash-Based Digital Signature Algorithm (formerly SPHINCS+)
NIST PQC Standardization — Official NIST post-quantum cryptography project page

Cloudflare CIRCL — Go cryptographic library with post-quantum primitives including ML-KEM and ML-DSA
oqs-provider — OpenSSL 3 provider enabling liboqs quantum-safe and hybrid algorithms for TLS 1.3
liboqs — C library for quantum-safe cryptographic algorithms (Open Quantum Safe project)
PQClean — Clean, portable, reference implementations of post-quantum schemes
PQ Code Package — Maintained successor to PQClean for NIST-standardized PQC schemes
Open Quantum Safe — Project integrating PQC into TLS, SSH, and other protocols via liboqs
pqcrystals/kyber — Reference implementation of ML-KEM (Kyber)
pqcrystals/dilithium — Reference implementation of ML-DSA (Dilithium)
OpenSSL 3.5 PQC — Post-quantum TLS 1.3 integration in OpenSSL (Kyber, Dilithium)
OQS-OpenSSH — Prototype OpenSSH fork with liboqs-based quantum-resistant key exchange and authentication
OQS Demos — Integration recipes and demos for using liboqs in TLS, SSH, curl, and related software
itzmeanjan/ml-kem — C++20 implementation of NIST FIPS 203 ML-KEM

IETF X25519MLKEM768 TLS Draft — Hybrid ECDHE plus ML-KEM key agreement for TLS 1.3
X25519Kyber768 in TLS — Hybrid post-quantum key exchange for TLS 1.3 (deployed in Chrome)
Chrome PQC Deployment — Chrome's X25519Kyber768 key encapsulation for TLS
RFC 9180: HPKE — Hybrid Public Key Encryption (extensible to PQC KEMs)

Meta PQC Migration Framework — Practical migration levels, inventory, deployment guardrails, and organizational lessons
NSA CNSA 2.0 — CNSA 2.0 Suite requirements for national security systems (ML-KEM-1024, ML-DSA-87)
PQCC International Requirements — Global PQC migration requirements and timelines
NIST SP 800-227 — Recommendations for key-encapsulation mechanisms
TNO PQChoiceAssistant — Tool for choosing suitable post-quantum algorithms for a deployment use case

Inside NIST's PQC — Technical deep-dive into Kyber, Dilithium, and SPHINCS+
Meta-analysis of PQC Finalists — Performance and security comparison of NIST-endorsed algorithms
Palo Alto PQC Guide — Enterprise guide to PQC standards and migration strategy

CISA, NSA and NIST quantum-readiness guidance — Roadmaps, cryptographic inventories and supplier coordination